googlesheets-automation
Pass
Audited by Gen Agent Trust Hub on Mar 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references an external MCP server at https://rube.app/mcp to provide automation tools.
- [PROMPT_INJECTION]: The skill facilitates reading data from external spreadsheets which creates a surface for indirect prompt injection. * Ingestion points: Sheet data is retrieved via tools like GOOGLESHEETS_BATCH_GET and GOOGLESHEETS_VALUES_GET. * Boundary markers: No specific delimiters or safety warnings for embedded instructions are present in the documentation. * Capability inventory: The skill enables broad actions including writing data (GOOGLESHEETS_BATCH_UPDATE) and deleting dimensions (GOOGLESHEETS_DELETE_DIMENSION). * Sanitization: No sanitization or validation of the retrieved spreadsheet content is documented.
Audit Metadata